WordPress.org

1. crimespree
   Member
   Posted 5 months ago #

   I haven't posted to my wordpress blog greenspree.ca in a while and while checking it today noted that somehow a user had registered and gotten admin status and posted a bunch of links to drug companies.

   I immediately deleted his profile and all the links he had posted and tracked down every setting he had changed (I think). I tried posting a new post after this and when I hit the publish button the browser goes to "http://greenspree.ca/wp-admin/post.php" which is a blank page. No matter how many times I try to post it goes to this blank page and stops.

   I upgraded to 2.5 but still get the same result!

2. michaelbraun
   Member
   Posted 5 months ago #

   Same exact thing happened to me, only no user hacking. Very strange behavior indeed. I upgraded as well and found no change.

3. crimespree
   Member
   Posted 5 months ago #

   Did you solve the issue?

4. gcosloy
   Member
   Posted 5 months ago #

   same thing happened to me within the last two hours --- no hackery, but my posts won't publish. nor can i save anything.

5. crimespree
   Member
   Posted 5 months ago #

   I've tried deactiviating all plug-ins, removing pingomatic, changed themes... nothing works.

   Seems to be different than some of the "blank page" problems noted on other pages in that the time it takes after hitting publish isn't long, it just stops at a blank post.php page immediately and that it doesn't actually post anything.

   HELP!

6. crimespree
   Member
   Posted 5 months ago #

   http://wordpress.org/support/topic/154571?replies=19

   Found the fix here!

   I got it. At least, I found out what was causing this for me.

   I was getting close in my last post, but it wasn't that spam was being appended... it was that there was a spam active_plugins item in the options table.

   There was a nefarious active_plugin in the database. It looked something like this: a:1:{s:5:./././././././././././././././././././././tmp/upl52653.jpg

   The post.php file calls wp-settings.php which tries to cycle through all of the active plugins. When it hit that one, it broke down. Once I pulled that entry out of the database, it is working great.

   Now, im pretty sure this entry was the result of a site compromise, because that filename just happens to match the title of a couple of spam posts that I also dug up. They had that jpg name as the title, and hundreds of spam links in a left: -2227px top: -3337px
   div.

   In looking around, it seems that hack could have been the result of an exploit in the 2.0 version of Wordpress that was installed at the time. Im hoping that with 2.5, this security issue will no longer be a risk.

   SO, this solved my problem, I hope it solves yours: Look in your wp_settings table for any active_plugins that don't look right and remove them.

   I hope this helps!

   Brad

7. michaelbraun
   Member
   Posted 5 months ago #

   No luck yet. I tried a variety of things to trouble-shoot, including creating a new user. When attempting to make a short post, I get an error message. When it's a long post, simply the blank 'post.php' page. I'm not even sure what to try anymore, so unless someone with more familiarity with PHP can look at the code (or some helpful WordPress person knows what to do), I'm feeling pretty sad and lost.

   One potential is to set things up so you can post via email. That would at least get you posting again.

8. michaelbraun
   Member
   Posted 5 months ago #

   I'll give it a try!

9. michaelbraun
   Member
   Posted 5 months ago #

   For some reason, I don't have a wp_settings table in my database. I tried creating one, but that hasn't seemed to resolve the problem. Strange too, because I have Akismat plugin installed and running. I am going to try to install another plugin and see if that properly creates the table.

10. crimespree
    Member
    Posted 5 months ago #

    Did you check past the first page of tables in your DB? I thought I didn't have a wp_settings table either but noticed there was more than one page of tables in the DB...

Reply

You must log in to post.